a2292aa0e6c60a189acc1e693f8ff7da_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a2292aa0e6c60a189acc1e693f8ff7da_JaffaCakes118
Size

151KB
MD5

a2292aa0e6c60a189acc1e693f8ff7da
SHA1

a345f346d9e48958ccffd061f75d9751fce07567
SHA256

c72d5f5706a999d9b25b08d787a239194fc63f6327f77ed6fff3688689415b63
SHA512

86c399ca149b85299ae257ee3f1b7ba3ee74979e23dbc8d22464cf5bd177c7c2e94fad50ae8fbbea47059212c6f687a6059dcd36ca12f69edda3b83dcea8c2f2
SSDEEP

3072:xOG77lItJesghXMa8EnkwjBtpBvZWhv64MnCnrnynhn8fO39V7xU95v+3mp7sNs/:baMXM1EBfBhOvzMnCnrnynhn84xos3m5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2292aa0e6c60a189acc1e693f8ff7da_JaffaCakes118

Files

a2292aa0e6c60a189acc1e693f8ff7da_JaffaCakes118
.dll windows:3 windows x86 arch:x86

449234f5a25c9d0f9ed84d3b144967fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OpenEventA
ReadFile
ReleaseMutex
SetEndOfFile
SetEvent
SetFilePointer
SetFileTime
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
CreateThread
ExitThread
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GlobalLock
GlobalUnlock
HeapAlloc
IsBadReadPtr
ResetEvent
SetErrorMode
MapViewOfFile
HeapSize
GetEnvironmentVariableA
GetLocalTime
GetLocaleInfoA
GetWindowsDirectoryA
FileTimeToSystemTime
GetCurrentProcess
GetDiskFreeSpaceA
GetDriveTypeA
GetFileTime
GetLogicalDrives
SetFileAttributesA
CreatePipe
DuplicateHandle
GetExitCodeProcess
PeekNamedPipe
ResumeThread
TerminateProcess
TerminateThread
lstrcmpiA
MultiByteToWideChar
FormatMessageA
GetFileType
GetPrivateProfileSectionA
MoveFileA
VirtualAlloc
VirtualFree
WritePrivateProfileSectionA
LoadLibraryA
HeapFree
HeapDestroy
HeapCreate
GetVolumeInformationA
CloseHandle
GetVersion
GetTimeZoneInformation
GetTempPathA
GetSystemTime
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFileSize
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateProcessA
CreateMutexA
CreateFileMappingA
CreateFileA
CreateEventA
HeapReAlloc

advapi32

GetUserNameA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

user32

GetActiveWindow
GetClassNameA
GetClipboardData
GetMessageTime
GetParent
GetWindowThreadProcessId
IsClipboardFormatAvailable
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageA
PostMessageA
RegisterClassA
SendMessageTimeoutA
DefWindowProcA
TranslateMessage
EnumWindows
UnregisterClassA
ExitWindowsEx
CharToOemBuffA
OemToCharBuffA
GetClientRect
SetWindowLongA
MoveWindow
SystemParametersInfoA
GetWindowLongA
LoadCursorA
DestroyWindow
CreateWindowExA
CloseClipboard
CallNextHookEx
PostThreadMessageA
UnhookWindowsHookEx
DispatchMessageA
MessageBoxA
SetWindowsHookExA

wsock32

inet_addr
shutdown
gethostname
WSAAsyncSelect
WSAGetLastError
bind
connect
inet_ntoa
listen
recv
send
getsockname
ioctlsocket
closesocket
accept
WSAStartup
WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
WSACancelAsyncRequest
WSACleanup
socket

rpcrt4

UuidCreate

shell32

ShellExecuteA

ole32

CoCreateInstance
OleUninitialize
StringFromGUID2
OleInitialize

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound

Exports

Exports

DebugBreakpoint
DllCanUnloadNow
DllGetClassObject
Service
SpawnAndStart
Start
Uninstall

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 797B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shared
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

449234f5a25c9d0f9ed84d3b144967fd

Headers

File Characteristics

Imports

kernel32

advapi32

user32

wsock32

rpcrt4

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 115KB - Virtual size: 114KB

.bss Size: - Virtual size: 16B

.rdata Size: 1024B - Virtual size: 797B

.data Size: 18KB - Virtual size: 18KB

.idata Size: 4KB - Virtual size: 3KB

shared Size: 4KB - Virtual size: 4KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 115KB - Virtual size: 114KB

.bss
Size: - Virtual size: 16B

.rdata
Size: 1024B - Virtual size: 797B

.data
Size: 18KB - Virtual size: 18KB

.idata
Size: 4KB - Virtual size: 3KB

shared
Size: 4KB - Virtual size: 4KB

.reloc
Size: 7KB - Virtual size: 7KB